Re: [malware-list] [RFC 0/5] [TALPA] Intro to alinuxinterfaceforon access scanning

Rik van Riel
2008-08-06T16:33:45Z

On Wed, 6 Aug 2008 17:12:56 +0100
tvrtko.ursulin@sophos.com wrote:
> Rik van Riel wrote on 06/08/2008 16:46:04:

> > More importantly, getting info on which bytes in a file changed
> > will also help backup programs and disk indexing programs.
>
> True, but Nick mentioned some huge issues with access after close and
> munmap in one of your previous postings. It sounds to me that would be a
> huge VM/filesystem work to actually enable things like this.

A universally useful large change is often easier to get into
the Linux kernel than a single-purpose hack.

--
All Rights Reversed